Overview

overview

10

Static

static

3

361d552d49...cs.exe

windows7-x64

10

361d552d49...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    361d552d49a10bb8ce7ae8601a195d00_NeikiAnalytics.exe

  • Size

    451KB

  • Sample

    240516-zzlr2sgd98

  • MD5

    361d552d49a10bb8ce7ae8601a195d00

  • SHA1

    e484734828fa73103f78a88536c80b8d1c25fc7d

  • SHA256

    f8b3521b3e1189f45e602a6183e83b1875b1c7e7cc287ab702d5243deb682363

  • SHA512

    bdd9e1748c387b8544e9073838597d321292fe52c68ca67b9bfbf2069e9dfc3060c90a2c8fae82197239960f04aa87dd2e685724fbc9e38ba543bc9eeec0e0e5

  • SSDEEP

    6144:XU+/pQw46NXPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:kiKwu/NcZ7/NC64tm6Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      361d552d49a10bb8ce7ae8601a195d00_NeikiAnalytics.exe

    • Size

      451KB

    • MD5

      361d552d49a10bb8ce7ae8601a195d00

    • SHA1

      e484734828fa73103f78a88536c80b8d1c25fc7d

    • SHA256

      f8b3521b3e1189f45e602a6183e83b1875b1c7e7cc287ab702d5243deb682363

    • SHA512

      bdd9e1748c387b8544e9073838597d321292fe52c68ca67b9bfbf2069e9dfc3060c90a2c8fae82197239960f04aa87dd2e685724fbc9e38ba543bc9eeec0e0e5

    • SSDEEP

      6144:XU+/pQw46NXPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:kiKwu/NcZ7/NC64tm6Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks